Information Systems Security Manager

Job Title:
Information Systems Security Manager

Employment:
Contract to hire (6 months)

Compensation: $75-$90/hr

Schedule: 40 hours /week

What You'll Do:

• Develop and maintain system security architecture documentation, including data flow diagrams, security boundary definitions, and control inheritance mappings
• Coordinate with system owners and engineering teams to identify security control implementation requirements and validate that technical solutions meet policy mandates
• Conduct security impact assessments, threat modeling, and risk assessments on proposed architectures, system changes, and configuration updates
• Review and approve technical security requirements in system specifications, interface control documents (ICDs), and engineering design documentation
• Manage end-to-end RMF processes per NIST SP 800-37 Rev. 2 for multiple concurrent systems to achieve and maintain Authorities to Operate (ATOs)
• Develop, maintain, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and coordinate Security Assessment Reports (SARs)
• Coordinate independent security control assessments with Security Control Assessors (SCAs) or third-party assessment organizations
• Prepare and deliver authorization packages to Authorizing Officials, including executive summaries, risk determinations, and authorization recommendations
• Present compliance briefings to senior management, government customers, and AOs regarding security posture, risk status, and authorization timelines
• Establish and operate continuous monitoring programs per NIST SP 800-137, defining security metrics, collection mechanisms, and reporting cadences
• Validate system configurations comply with Security Technical Implementation Guides (STIGs), DISA baselines, and DoD security configuration requirements
• Review vulnerability scan results, penetration test findings, and security assessment outputs to identify control weaknesses and drive remediation
• Maintain current security control traceability matrices mapping policy requirements to implemented controls and assessment evidence
• Lead corporate information security compliance initiatives ensuring adherence to NIST SP 800-171, NIST SP 800-53, CMMC, and Space Policy Directive 5 (SPD-5)
• Support CMMC Level 2+ compliance activities, including practice implementation validation, artifact development, and assessment preparation
• Develop and maintain security policies, procedures, and standards that implement regulatory requirements
• Support Defense Counterintelligence and Security Agency (DCSA) assessments, customer security audits, and government inspections
• Track regulatory changes and assess impacts to existing authorizations and compliance programs
• Participate in system engineering reviews, design reviews, and change control boards to ensure security requirements are integrated early in development
• Validate security requirements are traceable from policy sources through system specifications to implemented controls and test procedures
• Support incident response activities by providing authorization boundary information, security control details, and impact assessments
• Interface with mission partners and external system interconnections to establish appropriate security agreements and MOUs

• Serve as subject matter expert for CNSSP-12 and CNSSI 53 requirements, translating policy mandates into specific system security requirements and control baselines for space vehicles, ground stations, and mission support systems
• Lead security categorization activities per CNSSI 53, determining appropriate Impact Levels (IL) and establishing control overlays for all national security systems

• Supportive, team-driven culture that values collaboration, transparency, and accountability
• Opportunity to grow your career with a global workforce solutions leader serving multiple industries
• People-first environment that encourages employees to bring their authentic selves to work
• Strong focus on partnership, innovation, and delivering meaningful results for clients and candidates

• This role offers the chance to join a company that prioritizes both people and performance-where your contributions directly impact client success while giving you room to grow and develop professionally.

• Acara is a premier recruiting and workforce solutions provider-we help companies compete for talent. With a legacy of experience in various industries worldwide, we partner with…